Data Protection

Apex E-Learn is committed to protecting the personal data of the parents, guardians, and children who use our Platform, in line with the Nigeria Data Protection Act (NDPA) 2023 and applicable international data protection standards. This page summarizes the safeguards and principles we apply. It should be read alongside our Privacy Policy.

• Lawfulness and consent — we process personal data, especially children's data, only with clear, informed parental consent.
• Purpose limitation — data is collected only for the specific purposes described in our Privacy Policy (enrollment, billing, class delivery, support).
• Data minimization — we collect only what is necessary to deliver our services; for example, we do not ask for information unrelated to enrollment or class delivery.
• Accuracy — parents can review and correct their own and their child's information through their dashboard or by contacting support.
• Storage limitation — data is retained only as long as necessary, as described in our Privacy Policy.
• Security — we apply technical and organizational measures to protect data against unauthorized access, loss, or misuse.

We recognize that children's personal data requires heightened care. Accordingly:

• Children do not create their own accounts — all data relating to a child is submitted and managed by a verified parent or guardian.
• Explicit parental consent is required before any child data is collected or a placement assessment is conducted.
• Access to children's records within our administrative systems is restricted to personnel who need it to deliver classes or provide support.
• We do not use children's data for advertising or marketing purposes.

We apply a combination of technical and organizational safeguards, including:

• Encrypted transmission of data between your browser and our servers
• Hashed, non-reversible storage of account passwords
• Role-based access controls restricting administrative access to authorized staff only
• Secure, access-controlled hosting for our database and application infrastructure
• Verification checks on payout account details before any financial settlement is configured

Where we rely on third-party service providers to help deliver the Platform (such as our payment processor, email provider, and video conferencing platforms), we choose providers who maintain appropriate data protection and security standards, and we limit the data shared with them to what is strictly necessary for their function.

In the unlikely event of a data breach affecting personal data, we will take prompt steps to contain and assess the incident, and will notify affected users and, where legally required, the Nigeria Data Protection Commission, in accordance with applicable law.

As a data subject (or as a parent exercising rights on behalf of a child), you have rights including access to your data, correction of inaccurate data, and withdrawal of consent. See Section 8 of our Privacy Policy for details on how to exercise these rights.

If you have questions or concerns about how we handle personal data, or wish to raise a data protection request, please contact us at privacy@apexelearn.example.